Xen CVE-2015-2044 Information Disclosure Vulnerability

Bugtraq ID:	72954
Class:	Design Error
CVE:	CVE-2015-2044
Remote:	No
Local:	Yes
Published:	Mar 05 2015 12:00AM
Updated:	Jul 15 2015 12:39AM
Credit:	Jan Beulich of SUSE
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 4.1 Citrix XenServer 6.0 Citrix XenServer 5.5
Not Vulnerable:

Xen CVE-2015-2044 Information Disclosure Vulnerability

Xen is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

Xen CVE-2015-2044 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2015-2044 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen CVE-2015-2044 Information Disclosure Vulnerability

References:

• Xen Project Homepage (Xen Project)
  
• Citrix XenServer Multiple Security Updates (Citrix)
  
• Xen Security Advisory 121 (CVE-2015-2044) - Information leak via internal x86 sy (Seclists.org)
  
• Xen Vulnerabilities on Huawei FusionSphere products (Huawei)